What RootGuard provides¶
RootGuard combines AdGuard Home as a network filter with Unbound as a dedicated recursive, DNSSEC-validating resolver. WebApp and Core manage the stack; a separate updater safely replaces Core and WebApp as a pair.
Six components, clear responsibilities¶
| Component | Role | Description |
|---|---|---|
| WebApp | UI | Login, dashboard, guided controls, and narrow API proxy |
| Core | CONTROL | Orchestration, configuration, validation, and DNS lifecycle |
| Updater | UPDATE | Atomic replacement of Core and WebApp with paired rollback |
| Unbound | DNS | Hardened recursive and DNSSEC-validating resolver |
| Blockpage | UI | Dedicated, plain-language block page instead of AdGuard's default response |
| Attestation Proxy | TRUST | Narrow egress path for signed release checks, itself managed via its own update channel |
Getting started
New here? Continue with Getting started.